This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/fxfMRB_UZHY-VbOVlrKPxAl5rWk.roa File: fxfMRB_UZHY-VbOVlrKPxAl5rWk.roa (raw, json) Hash identifier: ZMaEpYYew+t/P0a7GjZLrOHp0tj4LJDHMUsWDrgmO/I= Subject key identifier: 7F:17:CC:44:1F:D4:64:76:3E:55:B3:95:96:B2:8F:C4:09:79:AD:69 Certificate issuer: /CN=0268b930beeca51fbf3543fe79f9b19345cf13d5 Certificate serial: 019B76EB2479985EA4B254F87D877EDDA083 Authority key identifier: 02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/fxfMRB_UZHY-VbOVlrKPxAl5rWk.roa Signing time: Thu 01 Jan 2026 00:18:00 +0000 ROA not before: Thu 01 Jan 2026 00:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204091 IP address blocks: 2a13:3700::/44 maxlen: 44 2a13:3700:10::/44 maxlen: 44 2a13:3700:20::/44 maxlen: 44 2a13:3700:30::/44 maxlen: 44 2a13:3700:40::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:24:79:98:5e:a4:b2:54:f8:7d:87:7e:dd:a0:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0268b930beeca51fbf3543fe79f9b19345cf13d5 Validity Not Before: Jan 1 00:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f17cc441fd464763e55b39596b28fc40979ad69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0c:b1:7e:32:5d:36:3b:e6:ca:4b:a8:e6:6f: ac:2f:d4:70:bd:eb:f8:55:1b:b0:89:c3:59:7d:41: 20:a1:41:03:14:a1:42:41:a9:9e:9f:d4:ec:1e:10: 8a:f6:dd:82:ec:e8:a3:d1:9b:ed:75:9b:c5:ab:bf: 86:99:60:a3:b7:ec:89:c4:67:08:ab:94:88:b4:ac: 95:3e:74:56:d9:70:37:25:fc:da:82:8d:5b:8d:af: ba:02:2f:d5:09:07:bc:ee:6a:15:9d:f8:e8:76:7d: 9e:94:91:3c:20:9f:c0:ee:c3:e6:1a:fe:c9:19:65: b5:3e:a2:41:36:e7:70:75:a5:17:5a:6d:e1:fa:4f: e6:ca:81:20:31:e6:ab:ef:c4:cc:e8:31:99:9b:cc: f0:6e:97:78:ce:08:20:c7:76:5e:df:22:e7:d5:e3: e3:0f:06:92:97:83:74:20:0b:99:da:ce:4d:53:96: 72:3f:31:b4:de:76:33:67:b9:38:03:2c:d5:f3:40: 48:2e:ac:71:f8:0b:14:ab:39:7d:7e:bb:f5:b7:23: 9c:18:12:2c:7e:2b:7c:af:c2:ee:89:17:a7:a9:3b: ee:7d:24:47:91:5f:d2:be:34:b4:f8:e9:45:df:6d: f8:a2:01:7e:20:b0:92:38:8e:c6:0f:e0:9f:a3:b2: 5c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:17:CC:44:1F:D4:64:76:3E:55:B3:95:96:B2:8F:C4:09:79:AD:69 X509v3 Authority Key Identifier: keyid:02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/fxfMRB_UZHY-VbOVlrKPxAl5rWk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:3700::-2a13:3700:4f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 31:70:b6:97:2d:9c:71:63:91:a9:5a:4b:2d:fb:cd:8a:e0:3b: 5a:dc:e6:26:c7:53:0e:e5:fc:64:29:bd:2c:63:66:2d:29:5e: aa:52:cd:87:eb:65:0d:a0:57:51:89:64:80:17:bb:b3:45:a9: 76:b5:be:65:c9:80:38:3a:b3:0b:57:8f:d4:d3:c8:76:48:c4: 4b:f5:9c:0a:4f:d5:b7:99:a3:7d:36:de:f5:ad:f3:2a:e4:a1: ab:5f:74:ad:19:b3:85:b0:7a:07:c6:85:82:eb:5f:6b:c2:93: df:a3:67:3d:1d:d7:ba:26:4e:5a:22:56:1d:9c:23:c9:34:96: 6b:a8:88:87:0d:d8:27:28:17:72:0d:58:88:fd:0e:a4:b8:ce: 56:06:8a:83:df:d2:54:b6:9e:7f:63:96:de:5c:28:ba:ef:31: 03:d9:fc:8d:04:5c:f9:08:15:ca:4d:cc:04:e7:39:15:9f:0d: 0b:48:2a:d5:22:40:83:64:61:40:6b:4b:03:63:38:ac:9c:67: d8:2f:e2:bb:fc:15:13:ea:2f:71:74:d4:9a:91:cd:33:53:6a: 41:f1:2f:00:6b:9f:8f:06:9c:7b:b4:94:76:2e:2c:91:7e:2d: ee:38:cd:f6:ca:92:aa:54:9a:55:2f:9f:e8:03:3a:e7:7b:d3: cb:05:0d:9b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt26yR5mF6kslT4fYd+3aCDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNjhiOTMwYmVlY2E1MWZiZjM1NDNmZTc5ZjliMTkzNDVj ZjEzZDUwHhcNMjYwMTAxMDAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjE3Y2M0NDFmZDQ2NDc2M2U1NWIzOTU5NmIyOGZjNDA5NzlhZDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgyxfjJdNjvmykuo5m+sL9Rwvev4 VRuwicNZfUEgoUEDFKFCQamen9TsHhCK9t2C7Oij0ZvtdZvFq7+GmWCjt+yJxGcI q5SItKyVPnRW2XA3Jfzago1bja+6Ai/VCQe87moVnfjodn2elJE8IJ/A7sPmGv7J GWW1PqJBNudwdaUXWm3h+k/myoEgMear78TM6DGZm8zwbpd4zgggx3Ze3yLn1ePj DwaSl4N0IAuZ2s5NU5ZyPzG03nYzZ7k4AyzV80BILqxx+AsUqzl9frv1tyOcGBIs fit8r8LuiRenqTvufSRHkV/SvjS0+OlF3234ogF+ILCSOI7GD+Cfo7JcUQIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFH8XzEQf1GR2PlWzlZayj8QJea1pMB8GA1UdIwQY MBaAFAJouTC+7KUfvzVD/nn5sZNFzxPVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW1pNU1MN3NwUi1fTlVQLWVmbXhrMFhQRTlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi80M2NkOTgtNmY4YS00NGNmLTk1YmQt NDIwZjljOGVhZmE0LzEvZnhmTVJCX1VaSFktVmJPVmxyS1B4QWw1cldrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi80M2NkOTgtNmY4YS00NGNmLTk1YmQtNDIwZjljOGVhZmE0 LzEvQW1pNU1MN3NwUi1fTlVQLWVmbXhrMFhQRTlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARMA8DBAAqEzcD BwQqEzcAAEAwDQYJKoZIhvcNAQELBQADggEBADFwtpctnHFjkalaSy37zYrgO1rc 5ibHUw7l/GQpvSxjZi0pXqpSzYfrZQ2gV1GJZIAXu7NFqXa1vmXJgDg6swtXj9TT yHZIxEv1nApP1beZo3023vWt8yrkoatfdK0Zs4WwegfGhYLrX2vCk9+jZz0d17om TloiVh2cI8k0lmuoiIcN2CcoF3INWIj9DqS4zlYGioPf0lS2nn9jlt5cKLrvMQPZ /I0EXPkIFcpNzATnORWfDQtIKtUiQINkYUBrSwNjOKycZ9gv4rv8FRPqL3F01JqR zTNTakHxLwBrn48GnHu0lHYuLJF+Le44zfbKkqpUmlUvn+gDOud708sFDZs= -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:55 2026 by rpki-client